$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: 9euxnwbmvzjkDf5+L2DKJEZ0ucTCLYIfVCHfOM1kKxI= Subject key identifier: 82:78:9C:F8:95:4F:9D:AB:7F:A6:CF:88:B3:85:B9:63:43:39:54:6D Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 0701 Signing time: Mon 30 Jun 2025 23:02:51 +0000 Manifest this update: Mon 30 Jun 2025 23:02:50 +0000 Manifest next update: Mon 07 Jul 2025 23:02:50 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: 9G6ZAMOkebaGy8agGFbnCWIzrE9ZeJhIhml6I2oHU+k=) 2: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: XfoPEJYVNqL9GPN7OO5lgySj9Am2K4GGqFy2jrQL4vA=) 3: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: zZjP0B8l+TLImIu+0/08vqSXgQ0sTSWao/0VpFAxOXM=) 4: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 5: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) 6: 5FD09C68393C11EFB8A9065BC4F9AE02.roa (hash: vMbIDct9MA/MTRo5g6rG9rCZ9V47y1ZmNSqrr1liLbI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Jun 30 23:02:50 2025 GMT Not After : Jul 7 23:02:50 2025 GMT Subject: CN=6863179a-1fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:4e:f2:22:82:2a:8f:ee:05:36:a4:b2:87: 6e:2c:ea:fb:99:10:26:7e:46:c8:23:46:bf:94:15: 04:c9:5d:22:52:3a:df:10:fe:d0:6d:d6:ca:06:17: dd:0e:87:04:72:5d:89:3d:29:07:48:08:9a:1b:5b: 5c:42:97:b0:e2:82:80:63:76:f4:2e:5b:e8:dc:09: 7a:78:a6:87:70:ea:6f:a2:9c:e0:71:f1:c2:f8:17: 61:39:db:aa:6f:85:f2:f8:95:34:5d:3f:24:f0:33: ef:57:2b:69:d2:01:48:94:67:5b:90:ea:36:46:97: 9a:95:e6:af:10:4b:89:0a:64:11:79:df:40:19:5d: 87:fd:3f:8d:b6:98:20:07:c1:8f:76:a6:aa:80:a6: b9:9e:d7:f6:d0:2b:c6:89:9d:f1:e4:3a:c8:4b:d9: 8e:7b:c2:c7:45:42:cb:01:5f:c0:47:88:95:c9:08: 68:c0:e4:1d:57:c5:da:37:c1:9c:00:5b:88:9c:93: 3c:4e:37:f0:a2:c3:d4:0b:24:b1:39:e3:cf:c7:7f: bc:6c:f1:8a:49:20:ac:68:06:bc:ab:55:fb:19:44: 44:d9:da:ef:17:0f:2e:fe:e1:8e:e5:73:7b:6e:85: ef:11:77:94:0a:3c:23:48:15:fe:c4:ba:ce:91:b9: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:78:9C:F8:95:4F:9D:AB:7F:A6:CF:88:B3:85:B9:63:43:39:54:6D X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:10:d2:24:6a:6c:4b:2b:b5:3e:8a:e3:c0:a6:c2:1f:5d:54: d7:9b:7f:7e:40:27:6e:7e:bd:ff:54:72:fb:de:df:e2:8d:9b: e6:29:a0:88:3f:7a:63:4a:06:92:1e:d9:fa:8a:d4:3a:f8:10: c9:a5:23:11:a3:46:f0:8b:2d:cc:ce:a1:38:2b:cb:59:e6:92: 21:3a:49:c8:fa:c7:73:fe:a4:fc:d0:db:f6:03:f0:0b:27:50: 04:8a:73:3f:3f:7b:1d:7b:07:b1:d8:3f:aa:0c:1c:08:45:b5: 72:e2:9d:d2:ba:12:2f:a3:19:68:bf:ef:eb:49:7b:70:ac:ef: f2:25:15:88:9b:07:36:ca:52:4d:53:9b:53:1c:b2:7e:dc:68: bd:aa:6a:8b:5c:f8:f3:45:63:3b:33:81:b4:80:09:4d:ce:69: bf:e8:37:c2:39:ec:9b:7f:12:94:57:74:70:4e:24:30:3e:8e: 10:2e:04:5e:97:c7:c8:27:73:4a:07:2a:45:97:a6:ad:8a:7d: f0:ac:5b:b7:73:11:e3:dc:cf:4b:ad:5e:df:5c:fc:dc:67:62: cc:01:98:e4:1b:2f:11:e4:dc:07:dd:20:b0:cf:d5:ba:df:86: 8d:74:7a:0b:68:a5:b0:b0:35:44:79:8a:85:a0:ab:08:01:59: ce:63:16:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUwNjMwMjMwMjUwWhcNMjUwNzA3MjMwMjUwWjAYMRYwFAYD VQQDEw02ODYzMTc5YS0xZmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9pO8iKCKo/uBTaksoduLOr7mRAmfkbII0a/lBUEyV0iUjrfEP7QbdbKBhfd DocEcl2JPSkHSAiaG1tcQpew4oKAY3b0Llvo3Al6eKaHcOpvopzgcfHC+BdhOduq b4Xy+JU0XT8k8DPvVytp0gFIlGdbkOo2RpealeavEEuJCmQRed9AGV2H/T+Ntpgg B8GPdqaqgKa5ntf20CvGiZ3x5DrIS9mOe8LHRULLAV/AR4iVyQhowOQdV8XaN8Gc AFuInJM8TjfwosPUCySxOePPx3+8bPGKSSCsaAa8q1X7GURE2drvFw8u/uGO5XN7 boXvEXeUCjwjSBX+xLrOkbladwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJ4nPiV T52rf6bPiLOFuWNDOVRtMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZENIkamxLK7U+iuPApsIfXVTXm39+QCdufr3/VHL73t/ijZvmKaCI P3pjSgaSHtn6itQ6+BDJpSMRo0bwiy3MzqE4K8tZ5pIhOknI+sdz/qT80Nv2A/AL J1AEinM/P3sdewex2D+qDBwIRbVy4p3SuhIvoxlov+/rSXtwrO/yJRWImwc2ylJN U5tTHLJ+3Gi9qmqLXPjzRWM7M4G0gAlNzmm/6DfCOeybfxKUV3RwTiQwPo4QLgRe l8fIJ3NKBypFl6atin3wrFu3cxHj3M9LrV7fXPzcZ2LMAZjkGy8R5NwH3SCwz9W6 34aNdHoLaKWwsDVEeYqFoKsIAVnOYxa1 -----END CERTIFICATE-----Generated at Wed Jul 2 20:57:10 2025 by rpki-client